28a04afa6be8f7dc02ffd2f999e1d7f7 | Triage

Sharing

General

Target

28a04afa6be8f7dc02ffd2f999e1d7f7
Size

28KB
MD5

28a04afa6be8f7dc02ffd2f999e1d7f7
SHA1

7b7b8637707e1e72cd08e79d60489c249aab6bcb
SHA256

9124e567bdd7be588c98e3a1c44641751c77672cfde818351b65b3705a2294bc
SHA512

30df72c064ac192df4c98c60827e105254d220366577a9685a68e5947f6e34c798ec52ad81f188db93b9ddb0f6054335133e17fc563360bbc4235e3fb2ec340c
SSDEEP

768:PyMVIAm+Vu/yTkUsHe5kLkVEYNG7Mhuj03st/:agZVu/SsHeQAqMcT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28a04afa6be8f7dc02ffd2f999e1d7f7

Files

28a04afa6be8f7dc02ffd2f999e1d7f7
.exe windows:4 windows x86 arch:x86

28c6ef1128d2dc0d513ddf64919b7716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ